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apparatus 



(57) An accounting apparatus has a money input, 
by which a user can input an amount of money into the 
apparatus. A receiver receives a body of information 
transmitted over a communication medium, and a reg- 
ister is arranged to store at least two data received with 
such body of information. A control unit processes the 



at least two data in the register received with such body 
of information, and the amount input by the user via the 
money input, and an indicator indicates to the user 
whether the user is permitted access to the body of in- 
formation, based on a result of processing provided by 
the control unit. 
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Description 

The present invention relates to an accounting ap- 
paratus, an information receiving apparatus incorporat- 
ing the accounting apparatus, and a communication 5 
system or information distribution system incorporating 
that accounting apparatus, and used in a multimedia 
network or the like, in which information is transferred, 
including moving-image data, other image data, voice 
recordings, computer programs, other recordings, and 10 
the like, and in which an account can be easily kept of 
applicable charges for services rendered. 

In the field of trunk communication networks, optical 
fiber networks have been consolidated, cable television 
has been used practically, and local area networks have ^ 
been used. Various types of information are provided by 
using such communication networks. Information serv- 
ice industries are becoming larger, and charge tolls in 
accordance with the quantity and contents of the infor- 
mation provided. It is important for such industries to 20 
properly charge a toll for the information provided. 

Protection of information (both as regards unau- 
thorized access to information and as regards tamper- 
ing with the contents of information) has not been yet 
perfected, and there is accordingly an issue of illegal 25 
use of information, including programs, images, and 
voice recordings. In order to prevent illegal use, a copy 
protection function is often provided, a serial number 
check is performed, or other prevention methods are 
performed. In the serial number check, a hardware se- & 
rial number and a software serial number are compared 
with each other when each program is executed. 

The copy protection function is inconvenient when 
a backup is to be performed, and the serial number 
check is inconvenient for the large-scale management 35 
of serial numbers and sales. 

A concept called "super distribution" proposed by 
Ryouichi Mori aims at the protection of a software pro- 
prietor (hereinafter called an information provider). This 
concept was disclosed in Japanese Laid-Open Patent *o 
Applications Nos. 60-191322, 60-72218. 64-68835, 
2-44447, 4-64129, and others. Fig. 1 illustrates the con- 
cept of "super distribution", as disclosed in Japanese 
Laid-Open Patent Application No. 4-64129. An informa- 
tion provider P supplies proprietary software PPi (or PPj) 4 $ 
to a user terminal station 10. The user terminal station 
1 0 includes a discrimination or judging unit 1 1 and a stor- 
age unit 12. The discrimination unit 11 judges whether 
or not the software PP is permitted to be used, by com- 
paring a software identification number PIDi (or PIDj) so 
with a user ID or condition. If usable, a use history of 
that provider information is stored in the storage unit 12. 

The information provider P charges a toll for provid- 
ed information (software PP) in accordance with the use 
history. Reference numeral 1 3 denotes a software serv- 55 
ice unit (SSU) including the above-described units. 

The "super distribution" system is, however, asso- 
ciated with the following problems. 



( 1 ) In the "super distribution" system, whether a us- 
er is a subscriber to an information provider, is 
judged from data specific to the user such as a user 
ID. It is therefore necessary to prepare at least a 
storage unit for storing the data specific to each us- 
er. Each user first asks the information provider to 
issue a user ID or the like which is stored as the 
user specific data. Such subscriber permission pro- 
cedure is cumbersome, and the management of 
specific data for a large number of users requires 
much labor. 

(2) In the "super distribution" system, the storage 
unit 12 for storing the software use history is used 
for preventing illegal use of information and for man- 
aging the use state of the information provider. In 
accordance with the use history, the information 
provider asks for the user to pay a charge. 

In the "super distribution" system, information is not 
sold but rented, which makes the use history necessary. 
However, with this system, the information provider 
knows what information has been provided to which us- 
er, and the privacy of the user is not protected. 

(3) With the "super distribution" system, although 
the use state and charges of provided information 
can be correctly managed, it would be desirable al- 
so to have a charge payment apparatus and meth- 
od, without which, after the information provider 
checks the use state of provided information, the 
provider is required to ask for a charge and to re- 
ceive it by using another system. 

(4) With the "super distribution" system, an informa- 
tion provider can charge a user for use of informa- 
tion by using specific data assigned to the provider 
information. But, with recently developing multime- 
dianetworks, other information (data non-specific to 
the provided information), networks and terminal 
devices for using the provided information become 
very important. But, the "super distribution" system 
does not consider this feature. 

It is an object of one aspect of the present invention 
to provide a novel apparatus and system for receiving 
accounting information from an information provider for 
use in protecting the rights of an information provider 
while also protecting the privacy of a user. 

According to one aspect of the present invention in 
achieving the above objectives, there is provided an ac- 
counting apparatus which has a money input, by means 
of which a user can input an amount of money into said 
accounting apparatus. The apparatus also has a receiv- 
er, connectable (directly or indirectly) to a communica- 
tions line or other medium to receive a body of informa- 
tion transmitted over the medium, and a register ar- 
ranged to store at least two data received over the line 



2 



BNSDOCID: <EP 0788080 A2J_> 



3 

with such body of information. A control unit processes 
the at least two data in the register received with such 
body of information and the amount input by the user 
via the money input, and an indicator indicates to the 
user whether the user is permitted access to the body s 
of information, based on a result of processing provided 
by the control unit. 

According to another aspect of the invention, there 
is provided an accounting apparatus comprising an in- 
formation processor, and a means for judging whether 10 
a body of information is permitted to be processed by 
the information processor, based on a specific datum 
received with that body of information and relating to that 
body of information, a non-specific datum also received 
with the information, and money information which is is 
available in the accounting apparatus. 

According to another aspect of the invention, there 
is provided a communication system comprising an in- 
formation provider, which provides a body of information 
together with a first datum. A service provider provides 20 
a service relating to handling of the body of information 
provided by the information provider, and adds a second 
datum which is delivered with the body of information 
and- the first datum to a user. (The service may for ex- 
ample comprise maintaining and operating a network 2s 
over which the information is delivered, or making avail- 
able a terminal for receiving the information, or both.) A 
charge distributor collects and distributes charges relat- 
ing to provision of the information to the user by the in- 
formation provider and to the service provided by the 30 
service provider, based on the first datum and the sec- 
ond datum, respectively. 

Embodiments of the present invention will now be 
described with reference to the accompanying draw- 
ings, in which: 35 

Fig. 1 is a block diagram showing a conventional 
"super distribution" system. 

Fig. 2 is a block diagram showing an information 
distribution system, including an accounting system, ac- 
cording to one embodiment of this invention. 40 

Fig. 3 is a block diagram showing an accounting ap- 
paratus and an accounting system according to the first 
embodiment of the invention. 

Fig. 4 is a data structure of hierarchically encoded 
data. 45 

Fig. 5 is a block diagram showing an accounting ap- 
paratus and an accounting system according to the sec- 
ond embodiment of the invention. 

Fig. 6 is a data structure of data encoded according 
to the MPEG method. so 

Fig. 7 is a block diagram showing an accounting ap- 
paratus and an accounting system according to the third 
embodiment of the invention. 

Fig. 8 is a block diagram showing an accounting ap- 
paratus and an accounting system according to the 55 
fourth embodiment of the invention. 

Fig.9 is a block diagram further illustrating the ac- 
counting system according to the fourth embodiment of 
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the invention. 

Fig. 10 is a block diagram showing an accounting 
apparatus and an accounting system according to the 
fifth embodiment of the invention. 

Fig. 11 is a block diagram showing an accounting 
apparatus and an accounting system according to the 
sixth embodiment of the invention. 

Fig. 1 2 is a block diagram showing an accounting 
system according to the seventh embodiment of the in- 
vention. 

Fig. 1 3 is a block diagram showing an accounting 
apparatus and an accounting system according to the 
eighth embodiment of the invention. 

Fig. 14 is a block diagram showing an accounting 
apparatus and an accounting system according to the 
eighth embodiment of the invention. 

(First embodiment) 

The first embodiment of this invention will be de- 
scribed with reference to Fig. 2 and Fig. 3. 

As illustrated in Fig. 2, it is expected that there will 
be one or more information providers P1 , P2, etc., who 
provide information to users on request. The information 
may be of any kind, and might for example include films, 
still images, musical or voice recordings, multimedia re- 
cordings, computer software, etc. One or more network 
providers N1 , N2, etc., will maintain networks, via which 
the information providers and users can communicate. 
One or more terminal providers T1 , T2, etc. , make avail- 
abe high-quality terminal devices, which users employ 
to send their orders for information to the information 
providers, and to which the information providers send 
the information in response to such orders. The termi- 
nals may for example, be provided in museums, stores, 
or indeed anywhere. While the information providers, 
network providers and terminal providers are indicated 
as being separate in Fig. 2, in practice, a single business 
entity may fill more than one of these functions, or all of 
them. A charge distributor 18, explained below, is also 
shown, as is a charge accommodator 20, which may for 
example be a bank. 

In this embodiment, the charge distributor 18 serves 
to ensure that the money paid by the user for the serv- 
ices provided in the sending of requested information to 
him or her, are properly allocated among the parties that 
have respectively provided those services. That is, part 
of the total fee may go to the information provider who 
supplied the information, part to the network provider for 
use of the network in delivering the information, and pari 
to the terminal provider, for use of the terminal, -To this 
end, each of these service providers is registered with 
the charge distributor. The user actually pays the re- 
quired fee to the charge distributor, in any suitable con- 
ventional way, such as by cash or check, by charge card, 
by electronic funds transfer from the user's bank 20, etc. 
The function of the charge distributor 18 may be filled 
by a retail store, such as a store where one can buy a 
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prepaid debit card. 

It should be noted that, while the term "provider" is 
used above to refer to the entity that supplies a given 
service (e.g., network service, terminal use, or filling of 
orders for information), the term is to be understood 
hereinafter as referring rather to the physical and tech- 
nical means used to supply the service, and similarly for 
the charge distributor 18. 

Thus, the illustrated system provides an accounting 
system which centralizes the charging and payment of 
fees for the information, providing simple means of pay- 
ment for the user, and ensuring that each service pro- 
vider receives the appropriate fee. 

In the illustrated system, each terminal is provided 
with an accounting apparatus (see Fig. 3) which can 
communicate with the charge provider 1 8. The account- 
ing device may of course be provided either as an inte- 
gral part of the terminal or as a separate unit connected 
to the terminal itself electrically and, if desired, mechan- 
ically. 

In Fig. 3, information PPj and PPj are bodies of in- 
formation requested from an information provider P by 
a user and sent by provider P to the user at a terminal 
10, where each body of information is stored. As shown, 
each is stored with additional data PIDj and TiD is and 
P1D- and TIDj, the origin and purpose of which is de- 
scribed below. (For convenience in the following discus- 
sion, the bodies of information will sometimes be re- 
ferred to collectively without their subscripts, as PP, PID 
and TID.) An accounting apparatus or unit 11 is provid- 
ed, either with or as part of the terminal 10, and has a 
signal processing unit 1 2, a money input unit 1 3, a check 
circuit 14, a display 15, and a communications interface 
unit 19. Via the interface unit 19 the accounting unit 11 
can communicate with a bank or other charge accom- 
modater 20, and with the charge distributor 18. The 
charge distributor 18, also communicates with the infor- 
mation provider P, as described below. 

It should be noted that in this embodiment, there is 
no separate network provider it being assumed that any 
required network is provided and operated by the infor- 
mation provider P. In other embodiments described be- 
low, other arrangements are shown and discussed. 

To obtain a body of information PP from the infor- 
mation provider P, the user communicates the order to 
the information provider P in any conventional manner, 
the particular choice of which is not critical to the present 
invention. The information provider P sends the infor- 
mation PPj, together with a first datum associated there- 
with, PID;, which the informaiton provider has assigned 
to this particular body of information PP S . In this embod- 
iment, the datum PIDj is price information, indicating the 
charge the information provider wishes to receive for the 
ordered body of information PPi. The terminal provider 
is the source of a second datum TIDi, which in this em- 
bodiment represents the fee the terminal provider wish- 
es to receive. 

The user inputs money via the money input 1 3. This 



may be by inserting a prepaid cash card, although it is 
within the scope of the invention for the money to be 
input in the form of currency or coins, or via a charge 
card, or a smart card, or some other such memory me- 
5 dium (e.g., a floppy diskette might be used instead of a 
card). The user cannot actually obtain access to the 
downloaded information PP until the check circuit 1 4 de- 
termines that access is to be permitted. For this pur- 
pose, the check circuit 1 4 performs a predetermined op- 
w eration involving PID and TID and the money input by 
the user. In this embodiment, the operation is to add the 
data PID and TID together, to yield a total charge, and 
the sum is compared to the input money value PPC Pro- 
vided the sum TID + PID is no greater than PPC, access 
75 is permitted, by the processing unit 1 2 performing nec- 
essary processing to reproduce the information PP for 
the user; in addition, the sum TID + PID is communicat- 
ed to the charge distributor 18 to confirm that the infor- 
mation is actually being made available to the user and 
20 that the required charge has been paid. The sum TID + 
PID is subtracted from PPC if the latter amount repre- 
sents the balance on a cash card or the like, and the 
remainder is entered on the cash card to indicate the 
value remaining in the card after the transaction. If the 
25 money input 1 3 is one which accepts cash and has the 
function of making change, then any excess of the mon- 
ey amount that was input by the user over the charge 
TID + PID can be returned to the user as change. Dis- 
play unit 15 of the accounting unit 11 is used to display 
30 relevant information to the user, for example, the total 
charge TID + PID, and/or the balance left on the user's 
card after that charge is subtracted. 

If the check unit 14 determines that access is not to 
be permitted, then the display unit 15 is used to advise 
35 the user of this fact by displaying an appropriate mes- 
sage. 

If desired, a display device of the terminal 10 itself 
may be employed in place of a separate display unit 15 
in the accounting apparatus 11 
40 Once the charge distributor 18 receives confirma- 
tion from the accounting apparatus 1 1 that access to the 
information PP is permitted to the user, and is advised 
as to the amount being charged for the access, then 
charge distributor 1 8 assigns part of the charge to each 
45 service provider involved in the transaction, according 
to a predetermined formula. (Alternatively, instead of a 
predetermined formula that applies to all transactions, 
it is within the scope of the invention for the charge dis- 
tributor 1 8 to determine the allocation of revenue in other 
so fashions, e.g., selecting from among several formulas 
that are to apply in various circumstances.) 

It should be noted that the terminal 10 should be 
arranged so that access to information downloaded to 
the terminal 1 0 cannot be achieved without prior approv- 
ss al by the accounting apparatus 1 1 

Alternatively, the user could pay the terminal pro- 
vider directly, and the terminal provider then forwards 
. the balance (with supporting records) to the charge dis- 
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tributor 18. As another alternative, if the user's card is 
(for example) a debit card issued by a bank, the terminal 
provider can forward the record of the total fee charged 
to the charge distributor 18, which presents the charge 
and obtains payment from the bank 20, and distributes 
the charge appropriately among the various service pro- 
viders. 

It is to be understood also, that the user may be able 
to have his or her charge accommodator 20 add value 
to the user's card while the user is at the terminal 10. 
For example, if access to a body of ordered information 
PP is denied because too little value remains in the us- 
er's card, the user may have the charge accommodator 
20 authorize the immediate addition of value to the card, 
thus enabling the user to obtain access to the ordered 
information PP after all, without the necessity of going 
to the bank, adding value to the card (or obtaining cash), 
and returning to the terminal. 

Again, the terminal provider may also be a retail out- 
let that can issue a new prepaid cash card, so that the 
user can purchase a new card on the spot if necessary. 

v These various manners of providing payment, and 
of handling the actual payment, are within the ordinary 
skill in the art. 

(Use information notice process) 

-The notice process will be described assuming that 
the user [U], the information provider [Pr], the charge 
distributor [C], and the charge accommodator [D] each 
have a respective public key and a respective secret key 
capable of use as a digital signature (the technique for 
doing so is well known in the art). In what follows, the 
secret key of. a party [X] is represented by [SX], and its 
public key by [PX]. . 

As an example, consider now that the user [U] uses 
a body of information provided by [Pr]. The result pro- 
duced by a party [X] using a key [Y] is represented in 
the following by {X}*Y, and each process by the user, 
the management of a key and time stamps are assumed 
to be made by means of having certified security pro- 
vided (in a manner well known in the art) in the account- 
ing unit 11 or by a memory or other record of the party. 



message MB to the charge distributor [CJ. [L] is the 
amount to be charged the user, and TB is a time 
stamp. 

MPr=[U, Pr, [Pr,L,TB]*SU] 

(4) The charge distributor [C] inspects this message 
and if it is correct, an amount [L] is paid as distrib- 
10 uted money to the information provider [Pr]. 

In the above description, a public key cryptosystem 
is used between the charge distributor [C] and each user 
in order to simplify the process. Obviously, a common 
is key cryptosystem using a common key may be used in- 
stead. 

The effective term of each message may be deter- 
mined based on the time stamp. In the above descrip- 
tion, the order of data elements in each message is not 
20 critical, but may be varied, as is well known to those in 
the art. The above accounting information input/output 
process and the use information notice process are only 
illustrative, and the use of another accounting process 
within the ordinary skill in the art, utilizing electronic ac- 
25 counting information without using data specific to the 
user, falls within the scope of the invention. 

In this invention, the money may be input as cash, 
or using a pre-paid card like a telephone card, electronic 
accounting information stored in a floppy disk, an IC 
30 card, or a PCMCIA card. The accounting information 
stored in the telephone card, floppy disk. IC card, or PC- 
MCIA card is specific data certified by a bank or other 
financial body. 

Specifically, if the PPC is electronic money informa- 
35 tion, input/output of such electronic money information 
can be achieved by following communication proce- 
dure. It is assumed here that the accounting uniM1 has 
encryption/certification means (to be described later) 
and means for security management of time stamps 
40 represented by TA (to be described later). These means 
are provided for the certification of PPC and prevention 
of illegal copying or the like of PPC under the manage- 
ment of time stamps, because PPC may be a medium 
such as a floppy disk which is easy to rewrite. 

(Money information input process) 

(1) User [U] sends an input request message MU 
for money information of N Yen, dollars or the like 
(the money denomination used is of course not itself 
relevant to the invention) to the charge distributor 
[C], by adding registration information [iU] oMhe us- 
er [U] (such as an account number and credit 
number) and with a digital signature using the se- 
cret key [SU]: 



(1 ) If user [U] wants to use the body of information 45 
in question and some network or terminal device, 
the accounting unit 11 permits the use of the infor- 
mation on the assumption that the money anmount 
in PPC is larger than the required charge recorded 
inPIDandTID. so 

(2) After the user [U] terminates the use of informa- 
tion, or during such use, the accounting unit 11 sub- 
tracts the required charge (the sum of the data PID 
and TID contained in the register provided to store ss 
those data) from the money amount PPC. 

(3) At this time, the user [U] sends the following use 
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TU indicates a time stamp. 

(2) The charge distributor [C] inspects the digital 
signature of MU by using the public key [PU] of user 
[U], and claims payment of N to the charge accom- 
modator [D] by using the registration information 
[iU]. 

If the payment is acknowledged, the charge distrib- 
utor [C] sends the following message MC to the user [U] 
with a digital signature generated by using the secret 
key [SC] of the charge distributor [C] for each unit of 
money (e.g., yen, dollar, etc.) of the money information 
N. (If the system works using only a predetermined mul- 
tiple of the local monetary unit, e.g., only in multiples of 
10 yen or of 10 dollars, then the secret key is used for 
each such multiple unit.) Thus, each yen or other basic 
unit is provided with a different time stamp TCi. 

MC= T [TU, [C,N,TCi]*SC]*PU 

(3) User [U] decodes each MC by using its own secret 
key [SU] and inspects the digital signature by means of 
the public key PC of the charge distributor [C] corre- 
sponding to the secret key [SC] of the charge distributor 
[C]. If the inspection shows a correct signature, money 
information [C,N,TCi]*SC is written in PPC. 

As stated, TA and TCi indicate time stamps. A mes- 
sage having the same stamp and same transmitter as 
another, is judged as an illegal request. Instead of being 
time stamps, TA and TCi may be a serial number or a 
random number (provided the system is arranged to ex- 
clude the possibility of the same number being used 
twice). Also, the effective term of each massage may be 
determined based on the time stamp. 

In the above description, a public key cryptosystem 
is used between the charge distributor [C] and each user 
in order to simplify the process. Again, a common key 
cryptosystem using a common key may be used in- 
stead. 

In the first embodiment, the accounting apparatus 
1 1 is able to communicate with the charge distributor 18 
via the interface 1 9 and a communications line. Instead, 
however, in an embodiment in which that capability does 
not exist, charges can be distributed in accordance with 
the frequency of use by collecting the use record in PPC 
of the provided information PP recorded by the account- 
ing unit 1 1 , as in the case of the message MB, when the 
user (here, the term refers to the individual) goes to the 
charge distributor to add value to the money card or the 
like. Provided that the electronic money information in 
the cards used in the system is specific data capable of 
being processed only by the charge distributor, then the 
user is required to go to the charge distributor in order 
to change the contents of PPC. Therefore, the use 
record can be collected and charges can be distributed 
properly. 



Alternatively, the accounting unit 11 may be provid- 
ed with means for recording a use of provided informa- 
tion PP in the pre-paid card. In this case, the charge 
distributor 1 8 collects the pre-paid cards and distributes 

5 charges in accordance with the frequency of use. In or- 
der to promote collection of pre-paid cards, the following 
system may be incorporated. Namely, if a new pre-paid 
card is bought to replace the old pre-paid card, only the 
money recorded in the new pre-paid card is paid, where- 

10 as if a new pre-paid card is not bought, a charge only 
for pre-paid card itself is paid. Charges used by pre-paid 
cards not collected may be distributed in accordance 
with ratios of charges used by pre-paid cards already 
collected. 

15 Each of above processes can be applied to each of 
the other embodiments. 

In this aspect of the invention, thus, instead of uti- 
lizing a user ID specific to the user, money information 
PPC not specific to the user is utilized, in order to judge 
20 whether or not the provided information PP is permitted 
to be used. Therefore, a user need not have a user ID. 
Only the money information PPC is given, i.e., only a 
use charge for the provided information is paid. This pro- 
cedure is natural and easy. It is not necessary to man- 
25 age a large amount of user specific information, and 
thus problem (1 ) can be solved. 

Also, since user-specific data is not given, the infor- 
mation provider does not learn which bodies of informa- 
tion have been used by which users, thus protecting the 
30 privacy of individual users, while ensuring that the 
charge corresponding to the frequency of use is paid to 
the information provider P. Although the preferred em- 
bodiment just described does not employ a use history 
storage unit for storing information about which body of 
35 information PP is used by a particular user, the invention 
may nonetheless also be provided with a frequency-of- 
use storage unit for keeping a record as to which infor- 
mation is used at what time, and a user notice unit for 
indicating a current use of provided information to the 
40 information provider P. In Fig. 1, frequency of use is 
communicated to the information provider P via the path 
indicated by a broken line. Even so, the information pro- 
vider does not learn which user is using which body of 
information. Thus, the problem (2) of user privacy is also 
45 solved. 

Plainly, also, since the appropriate charge is de- 
ducted from PPC and forwarded to the charge distribu- 
tor, which then allocates the money among the various 
service providers appropriately, problem (3) also is 
50 solved. 

Particular examples of how the PPC can be ob- 
tained or collected, and how charges are distributed to 
each information provider, while simultaneously achiev- 
ing a solution of problem (2), will be described below 
55 with regard to the second to sixth preferred embodi- 
ments. 

In the first embodiment, problem (4) is solved by 
adding a datum Tl D relating to use of a network and ter- 
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minal, which is settled between the information provider 
and the network provider and/or terminal provider ap- 
propriately, such that the money received by the charge 
distributor is then allocated according to the agreement 
between the information provider and the other service $ 
provider(s). 

Thus, in the present embodiment, not only the in- 
formation provider but also a network provider and ter- 
minal provider will rightly receive money based on using 
the network by including in ITD not only the charge for ' 10 
the service but a record of (for example) the time of use 
of the network in transmitting the ordered information. 
In such case, of course, the accounting apparatus 11 
does not simply add TID and PID to obtain the total 
charge, as described above, but first ascertains the net- is 
work charge from TID and adds that charge to PID, and 
then proceeds as described above. 

Also, detailed accounting can be achieved by re- 
cording using time, the kind of network used, etc. In this 
case, the detailed data will be recorded on a connecter 20 
device located between the network and the information 
provider, such as a hub device or a gateway device. 

Similarly, the terminal provider, if separate from the 
information provider or network provider, will rightly re- 
ceive money based on use of the terminal device, e.g., 25 
by adding to the incoming TID, a separate charge for its 
service. Alternatively, a separate charge may be at- 
tached, as an additional datum (not shown) that is also 
received in the register and processed with PID and Tl D. 
In general, thus, charges imposed by any number and 30 
kinds of service providers may be included, permitting 
great flexibility in the services provided to users. 

(The second embodiment) 

35 

In this embodiment, the present invention is applied 
to realize an accounting unit used in a charge system 
suitable for use where the requested body of information 
PP is hierarchically encoded (a known system of encod- 
ing, described briefly below), and is sent by the informa- 40 
tion provider P with a number of layers of encoding that 
may vary from case to case. Using the second embod- 
iment, the charge can be set in correspondance to the 
number of layers of encoding (and thus, the resolution 
of the received information) used in transmitting the par- *s 
ticular body of information requested by the user. IN 
such a system, the user may be able to choose the 
number of layers to be used, based on desired resolu- 
tion, or on the resolution of which the user's monitor is 
capable, or based on how long the user is willing to wait so 
for the information to be transmitted. Again, it is within 
the scope of the invention that the number of layers 
might in some situations be determined at the informa- 
tion provider's end. 

First, hierarchical encoding will be briefly described, ss 
Hierarchical encoding is known as an encoding 
method which can efficiently cope with image process- 
ing apparatuses with different resolutions upon encod- 
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ing image information, and is suitable for retrieving de- 
sired images from an image database. 

In the following description, a reduced image that 
roughly represents the overall image is encoded, and 
subsequently, additional information (the various "lay- 
ers"), each containing more detail, and used for enlarg- 
ing the reduced image, in turn, is encoded. 

As a result, scalable encoding using different reso- 
lutions can be realized to some extent. For example, a 
reduced image with a small number of pixels may be 
displayed on a monitor, and a detailed image with a large 
number of pixels using full information may be printed. 

Fig. 4 shows the general data structure of hierarchi- 
cally encoded data. Referring to Fig. 4, a field [header 
of image] includes a header indicating the beginning of 
a body of image information as a whole. A field [header 
of frame 1 ] includes a bit pattern indicating the beginning 
of frame 1, and a field [frame 1] includes information 
about layer 1, obtained by encoding an image obtained 
by reducing the original image to the smallest size used 
in the particular hierarchial encoding scheme in ques- 
tion. 

A field [header of frame 2] includes a bit pattern in- 
dicating the beginning of frame 2, and a field [frame 2] 
includes the information of layer 2, which is difference 
information that can be used to enlarge the image of lay- 
er 1 or to increase its resolution. 

Similarly, a field [header of frame n] includes a bit 
pattern indicating the beginning of frame n, and a field 
[frame n] includes information of layer n as difference 
information that can be used to enlarge or to increase 
the resolution of the image of layer n-1 . - 

As a typical encoding method of this type, a JPEG 
hierarchical encoding method is used. For more detail 
on the JPEG system, reference may be made to the 
publications ISO/ IEC 1091 8-1 or ITU-T T.81 , T.83, and 
which are incorporated herein by reference. Other such 
systems, however, may also be used within the scope 
of the invention. 

In this embodiment, the above resolution of the hi- 
erarchical encoding method (e.g., number of layers 
used) is used as TID. This resolution is not specific to 
the particular body of image data PP ordered by the us- 
er. That is, the resolution of transmitted data is changed 
based on the traffic of communication line, the capability 
of the user's monitor or the precise capability for data 
search. Therefore, in this embodiment, the resolution of 
image data and the charge corresponding thereto are 
represented as TID. For example, a charge for a rough 
resolution of an image (call it "class 1 ") differs from a 
charge for the highest definition resolution of the same 
image (class n). 

If it wishes, the information provider may in every 
case send the highest resolution image data, the user 
only obtaining access to the level of resolution that has 
been ordered and is encoded in TID; altervatively, of 
course, the information PP may actually be transmitted 
with only the number of layers that are needed by the 
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user who ordered the information. 

In this embodiment, shown in Fig. 5, the operation 
is substantially the same as in the first embodiment, and 
need not be described again in detail. Since TID in- 
cludes more information than just charge information, 
the check circuit 14 must derive the charge information 
contained in the datum TID, before adding that value to 
PID to obtain the total charge. 

When a use of PPC is permitted by the checking (or 
discrimination) unit 14. resolution data recorded as all 
or part of TID with information PR is sent to the codec 
12a in processing circuit 12. The codec 12a then de- 
codes the information PP based on the resolution data. 

If the information PP includes all-class information 
(the highest definition information) and the user or the 
terminal device, such as the monitor, designates the res- 
olution, the codec decodes the information PP in ac- 
cordance with the designated resolution. 

Also, in this embodiment, the discrimination unit 14 
and the money input 13 are structured so that, even if 
the remaining value in the PPC can change with time, 
as long as the charge is smaller than the money record- 
ed in the pre-paid card. PP can be used continuously. If 
the money input 13 is structured so as to allow an addi- 
tional pre-paid card to be inserted, PP can be used for 
a longer time period. 

Such a pre-paid card can be easily bought from any 
one of the pre-paid card retail shops, such as in the case 
of telephone cards. In this case, the manufacturer of the 
pre-paid card may serve as a charge distributer 18. 

It should be noted that in Fig. 5, the charge distrib- 
utor 1 8 and charge accommodator 20 are not shown. It 
is within the scope of the invention, however, for the ac- 
counting apparatus 11 of any embodiment to be con- 
nected to either or both via a communications line and 
an interface as in Fig. 3. 

Distribution of a charge corresponding to the fre- 
quency of use is realized by the accounting unit 11 no- 
tifying the charge distributer 18 of current use informa- 
tion via a communications interface like the interface 1 9 
shown in Fig. 3. This use notice is issued only when the 
accounting unit 11 updates the money recorded in the 
pre-paid card. 

If the provided information PP is received via the 
communication line, the communication l/F 19 can be 
used not only for the information PP but also for the cur- 
rent use information. 

If no communications interface is used, a pre-paid 
card different for each body of provided information may 
be used. In this case, the discrimination circuit 14 
checks each pre-paid card and judges whether or not 
the provided information PP can be permitted to be 
used. 

In this embodiment, software for decoding the infor- 
mation PP may be supplied to the user with the infor- 
mation PP by the information provider, network provider, 
or software developer. In this case, the charge collected 
from the user is distributed to the information provider, 



network provider, and software developer in accordance 
with the notice about use of user. 

Also, the network provider may supply a decoding 
service for a user by decoding the information PP. In this 

5 case, the network provider adds the TID to the informa- 
tion PP and sends the TID to the user with decoded in- 
formation in the transmitter such as a hub device. 

Also, some institutes, such as an information pro- 
viding center, may provide the information PP. In this 

10 case, the institute decodes the information PP accord- 
ing to the class of coding designated by the user and 
adds the TID to the decoded information PP. 



(The third embodiment) 
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The third embodiment, which deals with com- 
pressed moving image data, will be described with ref- 
erence to Fig. 6 and Fig. 7. 

First, the MPEG system, which is well known as a 
20 moving image data compression method, will be briefly 
described. 

The MPEG data conforms with the international 
standard for encoding a moving image in a highly effi- 
cient manner. Fundamentally, although the frequency 

25 characteristics of the data and the human visual sense 
characteristics are used in a manner similar to the fore- 
going JPEG system, the MPEG data achieves an even 
higher efficiency encoding by further using a redundan- 
cy in the time-base direction that is peculiar to moving 

30 images. 

The MPEG system has a version MPEG1 , in which 
the transfer rate is set to the maximum value ol 1 .5 Mbps 
for a digital stage media; and another, MPEG2, in which 
the upper limit on the transmission rate is eliminated al- 
35 together. It is intended that that system be usable in all 
of transmitting systems such as bidirectional digital mul- 
timedia equipment, digital VTR, ATV, optical fiber net- 
works, and the like. However, since their fundamental 
algorithms are almost the same, the MPEG1 is used as 
40 a base, and its data structure and encoding/decoding 
algorithm will now be described. 

In the MPEG2 system, although several encoding 
methods are provided, and are identified by sets of char- 
acteristics called n pr°f' les " (simple profile, main profile, 
45 scalable profile, space scalable profile, and high profile, 
all of which are well known in the art), the typical, main 
profile is fundamentally almost the same as the MPEG 1 . 

The principle of high efficiency encoding using the 
MPEG system will now be described. 
so In this high efficiency encoding system, by obtaining 
a difference between two frames (or two fields), a re- 
dundancy in the time-base direction is eliminated; the 
differential data thus obtained is DCT converted and 
variable-length encoded; and, redundancy in the space 
55 direction is eliminated, thereby realizing a high efficien- 
cy in encoding as a whole. 

With respect to the redundancy in the time-base di- 
rection, in the case of a moving image, by taking advan- 
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tage of high correlation between consecutive frames, a 
difference between the target frame (the one being en- 
coded) and the frame that precedes or immediately fol- 
lows it in time is obtained, thereby enabling the redun- 
dancy to be eliminated. s 

In the MPEG system, therefore, in addition to an in- 
traframe encoding image (l-picture) which mainly en- 
codes information in the frame with reference to other 
information in the frame, there are, as shown in Fig. 6: 
a forward prediction encoding image (P-picture) for en- 10 
coding a difference value between the target frame and 
the preceding frame; and a two-directional prediction 
encoding image (B-picture) for encoding a difference 
value of the smallest data amount in a difference value 
between the target frame and the frame interpolated is 
from both the preceding and the subsequent frames. 
Those frames according to those coding modes are 
combined in accordance with a predetermined order, as 
shown in Fig. 6. 

In the MPEG, one unit (termed a "GOP") is con- 20 
structed by one l-picture, four P-pictures, and ten B-pic- 
tures, preferably in the order shown in Fig. 6. A combi- 
nation such that the l-picture is arranged at the head 
and two B-picture and two P-pictures are repetitively ar- 
ranged, is recommended. By placing the I -pictures at a 25 
predetermined period, a special reproduction such as a 
reverse reproduction or a partial reproduction on a 
GOP-unit basis can be performed, thereby preventing 
errors. 

When a new object appears in the frame, then by so 
obtaining the difference between the target frame and 
the nexst frame, rather than by obtaining the difference 
between the target frame and the preceding frame, the 
difference value decreases, thus reducing the amount 
of information that has to be encoded. 35 

In the MPEG, therefore, when executing the two- 
directional prediction encoding as mentioned above, a 
higher efficiency compression is achieved. 

In the MPEG system, a motion compensation is also 
performed. For example, the foregoing encoding is per- 40 
formed on blocks of 8 pixels X 8 pixels, and a larger unit 
(a macroblock) is constructed of four blocks with respect 
to luminance data and two blocks with regard to color 
difference data. A difference between the block being 
encoded and the corresponding block of the preceding 
or subsequent frame is obtained. By searching the mac- 
roblock for the smallest difference, a motion vector is 
detected. The motion vector is encoded as data. 

When decoding, the corresponding macroblock da- 
ta of the preceding or subsequent frame is extracted by so 
using the motion vector, thereby decoding the encoding 
data which was encoded by using motion compensa- 
tion. 

In such a motion compensation as mentioned 
above, after the preceding frame has been encoded, it ss 
is again decoded, thereby obtaining a frame. The motion 
compensation is performed using the macroblock in 
such preceding frame and the macroblock of the target 
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frame to be encoded. 

Although inter-frame motion compensation is per- 
formed in MPEG1, an inter-field motion compensation 
is executed in MPEG2. 

The different data and motion vector obtained by 
the motion compensation as mentioned above are fur- 
ther high-efficiency encoded by the DCT conversion and 
Huffman encoding. 

The data structure of the MPEG system will now be 
described. The data structure is constructed by a hier- 
archical structure comprising a video sequence layer, a 
GOP layer, a picture layer, a slice layer, a macroblock 
layer, and a block layer. Each layer will be sequentially 
described from the lowest layer in the diagram. 

First, the block layer is constructed by (8 pixels X 8 
pixels) each of luminance data and color difference data 
in a manner similar to the foregoing MPEG. The DCT is 
executed on this unit basis. 

The macroblock layer is constructed by collecting 
four blocks with respect to each of the color difference 
data as for the foregoing blocks and by adding a mac- 
roblock header. In the MPEG system, the macroblock is 
used as a unit for motion compensation and encoding 
which will be explained hereinafter. 

The macroblock header includes data of the motion 
compensation of each macroblock unit and quantization 
steps; and, data indicating whether six DCT blocks (lu- 
minance blocks YO, Y1, Y2, Y3, and color difference 
blocks Cr, Cb) in each macroblock do or do not have 
data. 

The slice layer is constructed by one or more mac- 
roblocks which are continuous (i.e., of more or less uni- 
form content, like a uniform portion of background) in 
accordance with the scanning order of the image and a 
slice header. As will be understood by those in the image 
compresssion art, the quantization steps in a series of 
macroblocks in same slice layer are set to constant 
steps. If the slice header has data which does not exist 
in each macroblock, the quantization steps in the slice 
layer are set to constant steps. In the first macroblock, 
the difference value of the DC component is reset. 

The picture layer is formed by collecting a plurality 
of slice layers on a frame unit basis and is constructed 
by a header, comprising a picture start code and the like, 
and one or a plurality of slice layers subsequent to the 
header. 

The header includes a code indicative of an encod- 
ing mode of the image and a code indicative of a precise 
motion detection (pixel unit or half-pixel unit). 

The GOP layer is constructed by a header such as 
a group start code, a time code indicative of the time 
from the beginning of a sequence, and the like, and a 
plurality of l-frame, B-frames, or P-frames subsequent 
to the header. 

The video sequence layer starts from a sequence 
start code and ends at a sequence end code. Control 
data, such as image size aspect ratio and the like, which 
are necessary for decoding, and a plurality of GOPs in 
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which the image size and the like are equal, are ar- 
ranged between the sequence start code and the se- 
quence end code. 

In the MPEG system having such a data structure, 
a bit stream is specified by its standard. 

Just as a hierarchically-encoded image may be 
transmitted and used with several different resolutions 
or in several different sizes by transmitting all layers of 
the data for that image, or fewer than all layers, similarly, 
with MPEG ; a usable image can be transmitted using 
less than all the available image information, thus result- 
ing in a less-detailed picture, but achieving faster trans- 
mission. In this embodiment, it is contemplated that the 
information provider P will not always have to send all 
available information in the ordered body of information 
PP. For example, if the user wishes a faster transmis- 
sion, or has only a limited display resolution available, 
the the informaoitn PP may be transmitted with only the 
l-frames, or with the I- and P-frames but not the B- 
frames. Accordingly, in this embodiment, an indication 
of which types of pictures (I only, I and P, or I, P and B) 
being included, serves as Tl D, either by itself or together 
with an explicit indication of the charge for the transmis- 
sion service. It will be appreciated that information which 
represents the kind(s) of picture transmitted, is not spe- 
cific to the particular image PP, because the kind(s) of 
picture sent, is changed based on the traffic on the com- 
munication line, the capability of the user's monitor or 
other considerations, as mentioned above. 

Therefore, in this embodiment, the kind(s) of pic- 
tures are represented as TID. For example, a charge for 
image data consisting entirely of I -pictures will differ 
from that for image data consisting of I-, P-and B-pic- 
tures (full frame data). The checking circuit 14 is of 
course constructed to derive the charge from the datum 
TID. 

As with the second embodiment, it is contemplated 
either that the informaiton provider will transmit only da- 
ta of the resolution that is requested, or that it will in at 
least some circumstances transmit full frame data, and 
leave it to the receiving terminal 10 to extract only what 
is needed or was requested. 

The operation of this embodiment will be described 
next with reference to Fig. 7. In most respects, this em- 
bodiment operates the same as the preceding embodi- 
ments, and will only be described with respect to the dif- 
ferences. 

When the use of PPC is permitted by the discrimi- 
nation unit 14, the resolution data provided as datum 
TID with information PP is sent to the MPEG codec 1 2b, 
which is part of the processor 12. The codec 12b de- 
codes the information PP based on the picture-kind data 
provided as TID. 

If the information PP includes the full frame data and 
the user or the terminal device (e.g., the monitor) des- 
ignates the kind(s) of picture actually to be utilized, the 
codec 1 2b decodes the information PP in accordance 
with the designated kind(s) of picture. 



As in the second embodiment, software for decod- 
ing the information PP may be supplied to the user with 
the information PP by the information provider, network 
provider, or software developer. In this case, again, the 

s charge collected from the user may include a charge for 
this additional service, which is distributed appropriately 
by the charge distributor 18. 

Alternatively, the network provider may supply a de- 
coding service for user by decoding the information PP 

70 in a hub device or the like. In this case, the network pro- 
vider adds the datum TID and sends the TID to the user 
with the decoded ordered information PP. 



(The fourth embodiment) 
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The fourth embodiment, which deals with encrypted 
data, will be described with reference to Fig. 8 and Fig. 9. 

Several kinds of data are transmitted in multimedia- 
networks, and these kinds of data differ from each other 
20 in the required processing time for encryption or other 
processing, such as data compression with the required 
security (strength). For example, some data of large vol- 
ume, provided in real time (such as moving image data), 
requires high-speed processing. On the other hand, oth- 
25 ex data, of small volume and not provided in real time 
(such as text data) requires high security rank rather 
than high-speed processing. 

Also, each information provider uses its own en- 
cryption method, etc. 
30 Therefore, this embodiment is designed to provide 
a new accounting system corresponding to variable se- 
curity ranks based on the strength of encryption or con- 
trol of access to data, and processing time based on the 
kind of encryption method, key data length used in the 
35 encryption, number of encryption operations, or the kind 
of processing, such as MPEG. 

In this embodiment, shown in Fig. S, security data 
regarding the above encryption method and security 
rank, etc. and processing time are used as TID. As in 
40 the other embodiments, this datum TID is sent to the 
user with the requested information PP 

As this embodiment, shown in Fig. 8, again oper- 
ates similarly to the ones described above, it will be de- 
scribed only as to differences. In this embodiment, the 
45 processor 1 2 has a codec 12c which is to decipher re- 
ceived envrypted data. 

In this embodiment, the user in ordering the desired 
informaiton PP specifies the level of encryption to be 
used, or selects from among several offered combina- 
50 tions of security strength and processing speed, or the 
like. More specifically, in this embodiment, the checking 
unit 14 initially determines that the user's PPC is suffi- 
cient to pay for the requested information PP (if such is 
the case), and then the user is shown a list of the avail- 
55 able encryption services, with the charge for each. This 
is preferably done by the information provider sending 
the various possible TID's to the terminal 10, where they 
are displayed to the user. The user selects one of the 
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services, and if the PPC is sufficient to pay for the se- 
lected service as well as for the informatoin PP itself, 
the information provider downloads the encrypted infor- 
mation PP. The datum TJD is used by codec 12c to de- 
cipher the information PP. s 

Again, it is within the scope of the invention that the 
information provider selects the encryption method to 
be used, based on available information regarding the 
types of encryption which the ordering user has availa- 
ble at his or her terminal, and attaches the proper TID 10 
accordingly, without necessarily displaying other types 
to the user before sending the ordered information. IN 
this case, the operation of this embodiment is more sim- 
ilar to that of the embodiments described above. Fig. 9 
illustrates a situation in which a network may deliver in- is 
formation encrypted using any of a number of methods, 
including (purely by way of example), the DES method, 
FELA, and RSA method, all of which are well known in 
the art. 

As further background, the secret key cryptosystem 20 
and public key cryptosystem will be described. 

The secret key cryptosystem is a cryptosystem (al- 
so called a secret key cryptosystem, a symmetry cryp- 
tosystem, or a common use cryptosystem) in which a 
transmitter and a receiver share the same secret key. 25 
Secret key cryptosystems may be classified into block 
ciphers and stream ciphers, the former encrypting a 
fixed-length character string (block) with the same key 
and the latter encrypting each character string or bit with 
a different key. Examples of block ciphers include a re- 30 
placement-cipher, which changes the order of charac- 
ters, and a character-change cipher, which changes a 
character to a different character. In these cases, a cor- 
respondence table of replacement and character 
change is used as the encryption key. 35 

Known stream ciphers include the Vigenere cipher, 
using a multi-table, and the Vernam cipher, using a one- 
time disposed key (the details of each cipher are de- 
scribed in Ikeno and Koyama, "Modem Cipher Theory", 
IEICE, 1986, second and fourth paragraphs). Of the 40 
block ciphers, DES (Data Encryption Standard) and FE- 
LA (Fast Data Encipherment Algorithm) are widely used 
as commercial ciphers because their algorithms are 
made public (for details, refer to Tsujii and Kasahara, 
"Cipher and Information Security", Shoukoudo, 1990, 45 
second paragraph). 

Since the algorithms of DES and FELA are public, 
they are modified in various ways in use, in order to pre- 
vent breaking of the ciphers. For example, the number 
of repetitions to be described later is increased (refer to so 
C. H. Mayer and S. M. Matyas, "Cryptography - A New 
Dimension in Computer Data Security", Wiley Inter- 
science, Appendix D, pp. 679 to 712, 1982) and a key 
is changed frequently (refer to Yarnamoto, Iwamura, 
Matsumoto, and Imai, "Square Type Quasi Random 55 
Number Generator and Practical Ciphering with Block 
Cipher", Technical Report, IEICE, ISEC93-29, pp. 65 to 
75, 1993). 



Public Key Cryptosystem 

In the public key cryptosystem, an encipher key and 
a decipher key are different, the former being made pub- 
lic and the latter being maintained in secret. There fol- 
low: (a) features, (b) protocol, and (c) typical examples. 

(a) Features of Public Key Cipher 

(1 ) Since the encipher key and decipher key are dif- 
ferent and the encipher key is made public, it is not 
necessary to send the encipher key in secret, which 
facilitates a dispatch. 

(2) The encipher key of each user is made public 
so that each user is required only to keep its deci- 
pher key in secret. 

(3) A certification function can be achieved by which 
a receiver can confirm that a received communica- 
tion text is not forged or modified. 

(b) Protocol of Public Key Cipher 

The algorithm of a public key satisfies the following 
two conditions, wherein a communication sentence is 
represented by M, the enciphering with the public enci- 
pher key "kp" is represented by E (kp, M), and the de- 
ciphering with a secret decipher key "ks" is represented 
by D (ks, M). 

(1) When "kp" is given, calculation of E (kp, M ) is 
easy. When "ks" is given, calculation of D (ks, M) is 
easy 

. (2) If "ks" is unknown, it is difficult to determine M 
from the viewpoint of the amount of calculation re- 
quired, even if "kp", the calculation procedure of E, 
and C = E (kp, M ) are known. 

If the following condition (3) in addition to the con- 
ditions (1) and (2) is satisfied, secret communications 
can be realized. 

(3) For all communication texts (plain texts) M, it is 
possible to define E (kp, M) and the condition of D 
(ks, E (kp, M) ) = M is satisfied. Namely, since "kp" 
is made public, anyone can calculate E (kp, M). 
However, only a person having the secret key "ks" 
can obtain M by calculating D (ks, E (kp, M)). If the 
following condition (4) in addition to the conditions 
(1) and (2) is satisfied, certification communications 
can be realized: 

(4) For all communication texts (plain texts) M, it is 
possible to define D (ks, M) and the condition of E 
(kp, D (ks, M)) = M is satisfied. Namely, only a per- 
son having the secret key "ks" can calculate D (ks, 
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M). Even if another person calculates D (ks\ M) by 
using a forged secret key ks\ the receiver can con- 
firm that the information was forged because E (kp, 
D (ks\ M)) becomes different from M. Even if D (ks, 
M) is forged, E (kp, D (ks, M)') becomes different 
from M and the receiver can confirm that the re- 
ceived information was forged. 

In the public key cryptosystem, the process E using 
the public key is called encryption, and the process D 
using the secret key is called deciphering. For the secret 
communications, the transmitter performs encryption, 
and then the receiver performs deciphering. For the cer- 
tification communications, the transmitter performs de- 
ciphering, and then the receiver performs encryption. 

The protocols will be explained wherein a transmit- 
ter "A" uses a public key cipher and performs secret 
communications, certification communications, secret 
communications with signature, relative to the receiver 
"B M . The secret key of "A" is represented by "ksA" and 
the public key of "A" is represented by "kpA", whereas 
the secret key of "B" is represented by "ksB" and the 
public key of "B" is represented by "kpB". 

Secret communications of a communication text 
(plain text) from "A* to "B" is performed by the following 
procedure. 

Step 1: "A" enciphers M by using the public key 
"kpB" of "B" and sends the enciphered text C to "B". 

C - E (kpB, M) 

Step 2: "B" deciphers C by using the secret key 
"ksB" of "B" to obtain the original plain text M. 

H = D (ksB, C) 



Since the public key of the receiver "B" is made pub- 
lic, any person not limited to M A U can have secret com- 40 
munications with "B u . 

Certification communications of a communication 
text (plain text) from "A" to "B" is performed by the fol- 
lowing procedure. 

Step 1 : M A" generates a transmission text S by using *s 
the secret key u ks A" of " A M and sends it to "B". 



If it is confirmed that M is a text having various 
meanings, it is certified that M has been transmitted from 
"A". 

Since the public key of the transmitter "A" is made 
5 public, any person not limited to "B" can certify the sig- 
nature text of U A". 

Such certification is also called digital signature. 
Certification communications with signature of a 
communication text (plain text) from "A" to "B" is per- 
io formed by the following procedure 

" Step 1 : "A" generates a signature text S through sig- 
nature of S by using the secret key "ksA" of "A". 
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S = D (ksA, M) 



S = D (ksA, M) 

"A" further enciphers S by using the public key "kpB" 
of "B" and sends the enciphered text C to "B" . 

C = E (kpB, S) 

Step 2: "B" deciphers C by using the secret key 
"ksB" of "B" to obtain a signature text S. 

S = D (ksB, C) 



"B" further deciphers S by using the public key "kpA" 
30 of "A" to obtain the original plain text M. 

M z E (kpA, S) 
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This transmission text is called a signature text and 
the operation of generating the signature sentence is 
called signature. 

Step 2: U B W deciphers S by using the public key 
"kpA" of U A" to obtain the original plain text. 55 

M - E (kpA. S) 



If it is confirmed that M is a text having some mean- 
ings, it is certified that M has been transmitted from tt A tt . 

The sequence order of the functions at each Step 
of the secret communications with signature may be re- 
versed. Specifically, Step 1 : C = E (kpB, D (ksA, M)) and 
Step 2: M = E (kpA, D (ks8. C)) may be reversed to Step 
1; C = D (ksA, E (kpB, M)) and Step 2: M = D (ksB, E 
(kpA, C)). 

(c) Typical public key cryptosystems. 

Typical examples of public key cryptosystems are 
enumerated in the following. 

Cryptosystems capable of secret communications 
and certification communications are as follows (all of 
the foregoing and following publications are incorporat- 
ed herein by reference). 

RSA cryptosystem: R. L. Rivest, A. Shamir and I. 
Adleman, "A method of obtaining digital signatures and 
public key cryptosystems", Comm. of ACM, 1978. 

R cryptosystem: M. Rabin, "Digitalized signatures 
and public-key cryptosystems", MIT/LCS/TR-212, 
Technical Report MIT. 1979. 

W cryptosystem: H. C. Williams, "A modification of 
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the RSA public-key encryption procedure", IEEE Trans. 
Inf. Theory, IT-26, 6, 1980. 

Ml cryptosystem: T. Matsumoto and H. Imai, "New 
algorithm for public-key cryptosystems". Technical Re- 
port, IT-82-84, 1982, IEICE; and T. Matsumoto and H. 
Imai, "A class of asymmetric cryptosystems based on 
polynomials over finite rings", IEEE International Symp. 
on Information Theory, 1983. 

Cryptosystems capable of only secret communica- 
tions are as follows: 

MH cryptosystem: R. C. Merkle and M. E. Hellman. 
"Hiding information and signatures in trapdoor knap- 
sacks. IEEE Trans. Inf. Theory, IT-24, 5, 1978. 

GS cryptosystem: A. Shamir and R. E. Zippel, "On 
the security of the Merkle-Hellman cryptographic 
scheme", IEEE Trans. Inf. Theory, IT-26, 3, 1980. 

CR cryptosystem: B. Chor and R L. Rivest, n A 
knapsack type public key cryptosystem based on arith- 
metic infinite field", Proc. Crypto. 84. 

M cryptosystem: R. J. McElioce, "A public-key cryp- 
tosystem based on algebraic coding theory", DSN 
Progress Rep. Jet Propulsion Lab. 1978. 

E cryptosystem: T. E. Eicamal, "A public key cryp- 
tosystem and a signature scheme based on discrete 
logarithm", Proc. Crypto. 84, 1984. 

T cryptosystem: Shigeo Tsujit, "A public key crypto- 
system using matrix factorization", Technical Report, 
IEICE, IT8512, 1985. 

Cryptosystems capable of only certification com- 
munications are as follows: 

S cryptosystem: A. Shamir, "A fast signature 
scheme", report MIT/LCS/TM-107, MIT laboratory for 
computer science Cambridge, Mass. 1978. 

L cryptosystem: K. Leiberherr, "Uniform complexity 
and digital signature", Lecture Notes in Computer Sci- 
ence 115 Automata Language and Programming, 
Eighth Colloquium Acre, Israel, 1981. 

GMY cryptosystem: S. Goldwasser, S. Micali and 
A. Yao, "Strong signature schemes", ACM Symp. on 
Theory of Computing 1 983. 

GMR cryptosystem: S. Goldwasser, S. Micali and 
R. L. Rivest, "A paradoxical solution to the signature 
problem", ACM Symp. on Foundation of Computer Sci- 
ence, 1984. 

OSS cryptosystem: H. Ong, C. P. Schnorr and A. 
Shamir, "An efficient signature scheme based on quad- 
ratic equation", ACM Symp. on Theory of Computing, 

OS cryptosystem: T. Okamoto and A. Shiraishi et 
al., "Signature scheme based on polynomials calcula- 
tion", IEICE, (D), J86-D, 5, 1985; and T. Noto and A. 
Shiraishi, "A fast signature scheme based quadratic in- 
equalities", IEEE Symp. on theory of Computing, 1984. 

(The fifth embodiment) 

This embodiment relates to a new accounting sys- 
tem in which charges ot use depend on the image quality 
of the provided image. In this embodiment, that is, the 



image quality depends on the number of frames per pre- 
determined time period, the number of pixels per image, 
the number of colors in the image, the clearness or 
brightness of each color, the dynamic range of resolu- 
s tion, etc. In this embodiment, such image quality is used 
for the datum TID. 

This image quality is not specific to the particular 
image, because the image quality is changed based on 
the traffic on the communication line, the capability of 
10 the user's monitor or a precise data search, or the like. 
Therefore, in this embodiment, the image quality and a 
charge corresponding to each available image quality 
are presented as the datum TID. For example, a charge 
for high quality image differs from a charge for low qual- 
*5 ity image. 

Again, it is within the scope of the invention for the 
informatin provider to transmit the image with the high- 
est available quality, leaving it to the terminal to extract 
image data of the desired quality in accordance with the 
20 datum TID, or alternatively to send the image with the 
desired quality. 

Next, the operation of this embodiment will be de- 
scribed with reference to Fig. 10. Again, since that op- 
eration is largely similar to that of previous embodi- 
es ments, it will be described only as to differences. 

When use of PPC is permitted by the discrimination 
unit 1 4, an image quality datum TID with information PP 
is sent to a display unit 1 2d in signal processor 12. The 
unit 1 2d processes and displays or prints the information 
30 pp based on the image quality datum TID. 

If the information PP includes the highest quality in- 
formation and a user or the terminal device such as the 
monitor designates the quality, the display unit process- 
es the information PP in accordance with the designated 
35 quality. 

In this embodiment, software for processing the in- 
formation PP (in whatever fashion) may be supplied to 
the user with the information PP by the information pro- 
vider, network provider, or software developer. In this 
40 case, again, a suitable additional charge is levied, e.g., 
by means of an additional charge datum besides PID 
and TID. 

In this embodiment, also, the network provider may 
give a processing service or a printing service for the 

45 user. In this case, the network provider adds the datum 
TID to the information PP and sends TID to the user with 
processed information. 

Some institutions such as an information providing 
center, may provide the information PP, in this case, the 

50 institution processes the information PP according to 
the designated quality by user and adds the TID to the 
processed information PP. 

Thus, new accounting systems related to features 
such as use of network and terminal, data compression, 

55 encryption, and image quality are described in the 
above-mentioned embodiments. Furthermore, this in- 
vention can be applied to other types of system, in which 
the above features are mixed and used by the above 
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mentioned TID. 

Also, this invention can be adapted to several kinds 
ot processing, besides the above-mentioned types of 
processing, by including the kind of processing in the 
datum TID, or by providing such data in addition to TID 
and PI D. Therefore, under the network situation to which 
this invention is applicable, several kinds of provider, 
such as an information provider, a terminal provider, and 
a software provider, will be able to use the network and 
will be correctly paid their charges from the user. 

Also, in this invention, the TID may be sent to a user 
independently, without the requested information PR as 
a way of notifying the user of the charge. (In this case, 
TID could include the total charge.) Then, if the money 
information stored in the PPC is larger than the charge 
shown in the TID, the information PP will be sent to the 
user, and the charge corresponding to the use may be 
paid. 

Furthermore, the first datum PID may also be sent 
to a user independently. Hence, transmitting efficiency 
will be improved. 

Also, in each of the above-described embodiments, 
a "free of charge" designation is included as a possible 
value of the charge communicated by either of the men- 
tioned data PID and TID. Therefore, for example, a low 
resolution image or a low quality image, etc., may be 
offered free, for advertisement. 

(The sixth embodiment) 

If the TID is a datum specific to the particular termi- 
nal in question, su.ch TID may be stored in the terminal 
1 0, as shown in Fig. 1 1 . In such case, several such data 
may be stored, for use according to circumstances. For 
example, one such datum may be used if the user only 
wishes to display the ordered information PP, while an- 
other datum is used if the user wishes to print the infor- 
mation. 

(The seventh embodiment) 

In the previous embodiments, only the user pays 
charges, based on the use of information and the net- 
work. However, in this embodiment, shown in Fig. 12 
and Fig. 1 3, not only the user but also a sponsor who 
supplies advertisements will pay a charge. 

In this embodiment, the difference between an ex- 
pense for producing information such as a TV program 
or a movie or computer software, and the expense col- 
lected from the sponsors 23 (see Fig. 12) is settled in 
the PID, TID as a charge to the user. Therefore, the in- 
formation provider P will be able to produce the infor- 
mation regardless of the money received from the spon- 
sors 23, and the user will still be able to use the infor- 
mation at a low charge. In this case, it is contemplated 
that the information PP will include advertisements. The 
user can select between high-quality information of high 
density (without advertisements) and inexpensive infor- 



mation with advertisements. In this case, the advertise- 
ment and the expense for information will be paid by the 
sponsors to the information provider P, and the informa- 
tion provider P charges the user for the use of the infor- 

s mation based on the difference. The process of collect- 
ing the charge from the user is the same as above men- 
tioned embodiments. 

Next, the operation of this embodiment, insofar as 
it differs from that of the preceding embodiments, will be 

w described with reference to Fig. 13. 

In Fig. 13, CIDj is data regarding the use of an ad- 
vertisement settled by the sponsor, and, like TID, is not 
data specific to the information PP. Unlike TID and PID, 
however, the value represented by CID is not subtrated 

is from PPC, but is added to PPC (this can also be viewed 
of course as CID being subtracted from TID + PID). That 
is, CID represents an amount paid by a sponsor, which 
accordingly the user does not have to pay. In return for 
this reduction in cost, the user receives advertisements 

20 (for example) with the ordered information PP Other- 
wise, the operation of this embodiment is largely like that 
of the preceding embodiments. 

Thus, in this embodiment, the discrimination unit 1 4 
judges whether the money PPC recorded in the pre-paid 

25 card is larger than the charge (PIC + TID - CID). If it is 
larger, and if the accounting unit 11 can claim payment 
from the PPC, the use of PP is permitted. In this exam- 
ple, the use charge is displayed on the display unit 15. 
The CID can be increased based on the frequency 

30 of use. 

In the accounting system of this embodiment, the 
sponsor will pay a charge when a user uses the adver- 
tisement with ordered information: the sponsor will pay 
a greater charge in the case of information PP which is 
35 used frequently, and a lower charge for the information 
PP which is not used frequently. 

The process for adding an advertisement to the in- 
formation PP is as follows. 

First, a user requests information PP, having elect- 
ee ed to pay a lower price and to accept advertisement with 
the ordered information. The information provider P 
sends the information PP via the sponsor to the user, 
and the sponsor adds its own advertisement and the 
CID to the information PP. If on the other hand the user 
45 requests the information PP without any advertise- 
ments, the information is sent to the user directly from 
the information provider P 

Alternatively, the sponsor asks to add its advertise- 
ment directly to the information PR so that the informa- 
50 tion provider can send the information PP, with or with- 
out advertisement, directly to the user. 

(The eighth embodiment) 

55 In the next embodiment, the charge related to TID, 
PID, CID depends on the frequency of use, such as a 
number of uses, or use time. 

The operation will be described with reference to 
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Fig. 14. 

In Fig. 14, reference numeral 24 is a memory unit 
which stores the frequency of use, such as a number of 
uses. The memory unit 24 is not accessible, except to 
the owner of the terminal (to protect the user's privacy). s 

In this embodiment, PPC is a pre-paid card such as 
a telephone card. A user inserts the pre-paid card into 
the money input 1 3. The accounting unit 11 reads mon- 
ey information from the PPC and the number of uses 
from the memory unit 24. The discrimination unit 14 10 
judges whether or not the money recorded in the pre- 
paid card is larger than the charge (PID + TID - CID). If 
it is larger, and if the accounting unit 11 can claim pay- 
ment from the PPC, use of the information PP is permit- 
ted by the discrimination unit 14. In this example, the is 
use charge is displayed on the display unit 15. 

After that, the frequency (contents of memory 24) 2. 
will be updated to take account of the most recent use. 
More specifically, if the ordered informatoin PP is, say, 
a movie two hours long, and the terminal 10 measures 20 
only one hour of use of that information, the user is able 
to access that same body of information again for up to 
another hour, at no extra charge. Alternatively, the infor- 3. 
mation provider may permit a user who has ordered the 
informaiotn PP to access it a specified number of times, 25 
say up to five, with a reduced charge for the second 4. 
through fifth accesses. In such case, memory 24 keeps 
track of the five accesses. Thus, a user can more con- 
veniently watch a long movie, or can load a complicated 
package of software in installments. 30 

As described so far, according to the present inven- 5. 
tion, an accounting apparatus and an accounting sys- 
tem solving the above conventional problems (1 ) to (4) 
of multi-media networks can be realized. 

Each user can rent at low cost a variety of informa- 35 
tion while protecting privacy. Not only an information 
provider but also the other provider can receive charges 
in accordance with a user frequency of provided infor- 
mation or network or terminal device, etc. without the 
management of use of provided information of each us- 40 
er by the information provider. By incorporating a charge 
distributor including retail shows and a charge accom- 
modating person, an accounting system with charge 
payment function which is easy to use can be config- 6. 
ured. 45 

Many widely different embodiments of the present 
invention may be constructed without departing from the 
spirit and scope of the present invention.lt should be un- 7. 
derstood that the present invention is not limited to the 
specific embodiments described in the specification, ex- so 
cept as defined in the appended claims. 8. 



Claims 

1 . An accounting apparatus comprising: 

(a) money input means, by means of which a 
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user can input an amount of money into said 
accounting apparatus; 

(b) receiver means, to receive a body of infor- 
mation transmitted over a line; 

(c) a register arranged to store at least two data 
received with such body of information; and 

(d) a control unit which processes the at least 
two data in said register received with such 
body of information and the amount input by the 
user via said money input, to determine wheth- 
er a user is permitted to access the body of in- 
formation. 

An apparatus according to claim 1 , further compris- 
ing an indicator to indicate to the user whether the 
user is permitted to access the body of information, 
based on a result of processing provided by said 
control unit. 

An apparatus according to claim 1, wherein said 
money input means is structured to receive cash. 

An apparatus according to claim 1, wherein said 
money input means is structured to accommodate 
an insertable recording medium and to read the 
amount from the recording medium. 

An accounting apparatus comprising: 

(a) an information processor; and 

(b) a means for judging whether a body of in- 
formation is permitted to be processed by said 
information processor, based on a specific da- 
tum received with that body of information and 
relating to that body of information, a non-spe- 
cific datum also received with the information, 
and money information which is available in 
said accounting apparatus. 

An apparatus according to claim 5, wherein the non- 
specific datum relates to use of a communication 
line. 

An apparatus according to claim 5, wherein the non- 
specific datum relates to use of a terminal device. 

An apparatus according to claim 5, wherein the non- 
specific datum relates to resolution at which the 
body of information was transmitted to said ac- 
counting apparatus, that information being hierar- 
chically encoded data. 

An apparatus according to claim 5, wherein wherein 
the body of information is MPEG data, and wherein 
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the non-specific datum relates to picture-type of that 
MPEG data. 

1 0. An apparatus according to claim 5, wherein the non- 
specific datum relates to security. 

1 1 . An apparatus according to claim 5, wherein the non- 
specific datum relates to processing speed for en- 
crypting or security verification. 

1 2. An apparatus according to claim 5, wherein the non- 
specific datum relates to a kind of encryption. 

1 3. An apparatus according to claim 5, wherein the non- 
specific datum relates to a quality of image. 

1 4. An apparatus according to claim 5, wherein the non- 
specific datum relates to a speed of processing. 

1 5. An apparatus according to claim 5, wherein the non- 
specific datum relates to a kind of processing. 

1 6. An apparatus according to claim 5, wherein the non- 
specific datum relates to advertisement by a spon- 
sor. 

17. A communication system comprising, 

(a) an information provider, which provides a 
body of information, together with a first datum; 

(b) a service provider, which provides a service 
relating to handling of the body of information 
provided by said information provider, said 
service provider adding a second datum which 
is delivered with the body of information and the 
first datum to a user; and 

(c) a charge distributor, which collects and dis- 
tributes charges relating to provision of the in- 
formation to the user by said information pro- 
vider and to the service provided by said serv- 
ice provider, based on the first datum and the 
second datum, respectively. 

1 8. A communication system according to claim 1 7, fur- 
ther comprising a network connecting said informa- 
tion provider, said service provider and said charge 
distributor. 

1 9. A communication system according to claim 1 7, fur- 
ther comprising: 

(d) an accounting unit which judges whether 
the user is permitted to access the body of informa- 
tion, based on the first datum and the second da- 
tum. 

20. A communication system according to claim 17, 
wherein the body of information comprises image 
data. 
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21. A communication system according to claim 20, 
wherein the image data is compressed using the 
MPEG method. 

22. A communication system according to claim 17, 
wherein the body of information comprises a com- 
puter software program. 

23. A communication system according to claim 17, 
wherein the first datum relates to a charge for using 
the body of information. 



24. A communication system according to claim 17, 
wherein the second datum relates to a charge for 
15 the service. 
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A communication system according to claim 17, 
wherein the service comprises delivering the infor- 
mation to the user via a network. 

A communication system according to claim 17, 
wherein the service comprises processing the body 
of information. 

An information reception method comprising the 
steps of crediting a user's account with an input 
amount of money, receiving a body of information 
transmitted over a line, storing the data received 
with said body of information, and processing the 
data received with said body of information and the 
amount of money credited to the user to determine 
whether a user is permitted to access the body ol 
information. 

A method of communicating information comprising 
the steps of providing a body of information together 
with a first datum from an information provider, han- 
dling the body of information by a service provider, 
adding a second datum to the body of information 
by the service provider, delivering the body of infor- 
mation, and the first and second data to a user, and 
collecting and distributing charges related to provi- 
sion of the information to the user by the information 
provider and to the service provided by the service 
provider based on the first datum and the second 
datum respectively. 
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(57) An accounting apparatus has a money input, 
by which a user can iorgiut an amount of money into the 
apparatus. A receiver receives a body of information 
transmitted over a communication medium, and a reg- 
ister is arranged to stee at least two data received with 
such body of informafion. A control unit processes the 
at least two data in ttos register received with such body 
of information, and ttoe amount input by the user via the 
money input, and aj» indicator indicates to the user 
whether the user is psmitted access to the body of in- 
formation, based on a result of processing provided by 
the control unit. 
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